mingw-w64-sundials

LOW
maintainer orphaned 0 votes scanned 2026-09-17 00:27:14.276658
View on AUR
Why flagged

The source is downloaded from the project's official domain (computation.llnl.gov), which is plausibly the project's own infrastructure; building from official source is normal AUR packaging, even if the host is not on a whitelist.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is downloaded from the project's official domain (computation.llnl.gov), which is plausibly the project's own infrastructure; building from official source is normal AUR packaging, even if the host is not on a whitelist.

1 higher static finding superseded - not the current verdict (shown for transparency)
Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:13 source=("http://computation.llnl.gov/projects/sundials/download/sundials-${pkgver}.tar.gz")

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: Andrew Sun <adsun701 at gmail dot com>
2
3pkgname=mingw-w64-sundials
4pkgver=5.3.0
5pkgrel=1
6pkgdesc="Suite of nonlinear differential/algebraic equation solvers (mingw-w64)"
7arch=('any')
8url="https://computation.llnl.gov/casc/sundials/main.html"
9license=('BSD')
10depends=('mingw-w64-lapack')
11makedepends=('mingw-w64-cmake')
12options=('!buildflags' 'staticlibs' '!strip')
13source=("http://computation.llnl.gov/projects/sundials/download/sundials-${pkgver}.tar.gz")
14sha256sums=('88dff7e11a366853d8afd5de05bf197a8129a804d9d4461fb64297f1ef89bca7')
15
16_architectures="i686-w64-mingw32 x86_64-w64-mingw32"
17
18build() {
19 cd "${srcdir}/sundials-${pkgver}"
20 for _arch in ${_architectures}; do
21 mkdir -p build-${_arch} && pushd build-${_arch}
22 ${_arch}-cmake \
23 -DEXAMPLES_ENABLE_C=OFF \
24 -DLAPACK_ENABLE=ON \
25 -DSUNDIALS_INDEX_TYPE=int32_t \
26 -DSUNDIALS_F77_FUNC_CASE="LOWER" -DSUNDIALS_F77_FUNC_UNDERSCORES="ONE" \
27 ..
28 make
29 popd
30 done
31}
32
33package() {
34 for _arch in ${_architectures}; do
35 cd "${srcdir}/sundials-${pkgver}/build-${_arch}"
36 make install DESTDIR="${pkgdir}"
37 install -d "${pkgdir}"/usr/${_arch}/bin/
38 mv "${pkgdir}"/usr/${_arch}/lib/*.dll "${pkgdir}"/usr/${_arch}/bin/
39 ${_arch}-strip --strip-unneeded "${pkgdir}"/usr/${_arch}/bin/*.dll
40 ${_arch}-strip -g "${pkgdir}"/usr/${_arch}/lib/*.a
41 done
42}
43
44

Scan history

Scanned at (UTC)SeverityRules
2026-09-17 00:27:14 Low 2
2026-09-16 00:03:17 Low 2
2026-09-15 00:25:31 Low 2
2026-09-14 00:27:57 Low 2
2026-09-13 00:19:54 Low 2
2026-09-12 00:25:17 Low 2
2026-09-11 00:19:22 Low 2
2026-09-10 00:22:44 Low 2
2026-09-09 00:04:09 Low 2
2026-09-08 00:18:08 Low 2
2026-09-07 00:30:15 Low 2
2026-09-06 00:17:06 Low 2
2026-09-05 00:16:27 Low 2
2026-09-04 00:03:13 Low 2
2026-09-03 00:15:47 Low 2
2026-09-02 00:02:31 Low 2
2026-09-01 00:11:19 Low 2
2026-08-31 00:19:57 Low 2
2026-08-30 00:04:14 Low 2
2026-08-29 00:29:17 Low 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion